1.4 Implement Continuous Security Scanning of Allowed Traffic to Stop Malware and Exploits NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Questions 16–19

1. 16foundation · easy

   Why is logging important in continuous security scanning?

   • ATo reduce the need for security policies
   • BTo verify the effectiveness of scanning and respond to detected threats
   • CTo automatically block all malicious traffic
   • DTo increase network speed
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which statement best describes the role of continuous security scanning in a Zero Trust enterprise?

   • AIt is an ongoing process that inspects traffic after policy allows it
   • BIt is used only for traffic that matches a deny-all rule
   • CIt is performed only on traffic from untrusted external sources
   • DIt is a one-time assessment performed when a user first connects
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which practice helps minimize the performance impact of continuous security scanning?

   • AUsing only software-based inspection to avoid hardware costs
   • BScanning all traffic with every available security profile
   • CApplying security profiles only to traffic that requires inspection
   • DDisabling logging for all allowed traffic
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which inspection technique relies on a database of known threat indicators to identify malicious content?

   • ASandboxing
   • BProtocol decoding
   • CSignature-based detection
   • DBehavioral analysis
   Reveal Solution Discussion Select an answer first